This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/H2v1rZuHkKbY5vnDEK2L86aU_KM.roa File: H2v1rZuHkKbY5vnDEK2L86aU_KM.roa (raw, json) Hash identifier: 8LShxKRibxjkhUpA7Rc2hPgHaFBLFbCuhTeBzlc3YNQ= Subject key identifier: 1F:6B:F5:AD:9B:87:90:A6:D8:E6:F9:C3:10:AD:8B:F3:A6:94:FC:A3 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C76EFF6FBAC51849A133FD09F52919 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/H2v1rZuHkKbY5vnDEK2L86aU_KM.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56619 IP address blocks: 62.89.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6e:ff:6f:ba:c5:18:49:a1:33:fd:09:f5:29:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f6bf5ad9b8790a6d8e6f9c310ad8bf3a694fca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:70:fb:3e:d3:63:cf:0c:a8:47:d5:4d:2b: 0c:eb:5d:1d:61:c3:97:b0:8a:a9:2b:05:44:77:99: e5:6d:c2:ea:60:6a:cc:83:3c:5e:36:c0:40:86:47: e5:8b:12:af:a1:1b:03:62:e2:88:f4:8b:bb:da:5c: 92:b3:dc:86:ca:43:1f:d8:bf:82:97:cb:8e:e0:e4: 79:83:35:c7:fc:29:9a:b8:e4:4e:64:63:83:af:3b: da:cc:a8:67:f3:5f:55:1d:7e:96:3c:32:68:a6:de: d0:b1:30:8c:89:b6:c2:74:a9:ef:a9:6d:ed:90:18: 28:7f:35:aa:61:4b:cf:2f:a3:b2:45:a6:22:05:58: 8f:2d:db:bd:2e:e9:2c:22:20:43:1d:1f:9c:74:fd: 8f:4a:31:85:95:02:fb:63:d3:87:06:3a:17:a8:8d: c3:f8:78:cc:84:17:3b:1c:47:ab:cb:e8:14:c1:ea: b1:dd:26:5c:55:ac:15:7a:5f:9b:19:45:48:55:b5: 44:60:11:3a:c0:03:92:2e:12:fa:8c:ec:12:fe:f0: 10:4d:39:12:fe:7d:93:ae:77:49:5f:d6:c7:d3:ba: 59:75:4f:3c:c8:31:8a:54:bc:70:2c:26:b6:b2:c0: 73:d4:36:ba:b4:d7:9f:f7:1c:ed:35:3f:9c:ab:94: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6B:F5:AD:9B:87:90:A6:D8:E6:F9:C3:10:AD:8B:F3:A6:94:FC:A3 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/H2v1rZuHkKbY5vnDEK2L86aU_KM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.89.203.0/24 Signature Algorithm: sha256WithRSAEncryption 10:2f:1b:81:0f:54:7a:98:18:55:8f:b7:b9:c0:98:79:7a:74: f9:f0:e2:39:50:6d:de:90:8f:aa:55:fe:f0:0f:3b:60:71:4b: bb:33:14:a8:b6:f1:1f:7f:da:fb:ec:79:ff:bd:2a:81:da:d5: e7:d2:9e:ac:45:53:b9:9f:e1:a1:33:39:d0:ef:ef:04:65:60: 69:e9:72:f0:08:0c:0d:92:ee:fb:c7:ed:3c:83:dd:28:14:90: 3b:ca:dc:2d:f1:73:89:0f:45:c1:6f:c6:37:29:dc:08:92:d7: 4f:36:81:50:65:ae:c3:e3:1d:9e:6d:75:7d:6e:d8:36:5d:ac: d3:85:14:e8:a4:39:92:25:20:d0:64:05:aa:cb:9f:4d:33:8b: cb:23:f7:2e:28:24:3d:fc:05:6b:b8:ab:d1:27:03:2f:57:df: 89:4a:25:22:c4:95:30:2f:6e:71:2c:d1:e8:ec:10:8c:1e:56: 2f:e7:c7:77:0d:3e:ac:4e:f4:27:61:4d:8d:60:12:63:3d:ef: dc:b5:94:00:26:af:64:3b:43:2a:1b:f9:b1:4a:69:a8:27:df: dd:71:4b:24:d4:1e:68:e5:e9:40:80:1c:b6:2d:9e:c2:a0:05: 0d:86:58:df:a6:4c:1e:96:02:a7:cd:10:e8:af:76:5d:01:61: d6:9f:a7:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x27/b7rFGEmhM/0J9SkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjZiZjVhZDliODc5MGE2ZDhlNmY5YzMxMGFkOGJmM2E2OTRmY2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueVw+z7TY88MqEfVTSsM610dYcOX sIqpKwVEd5nlbcLqYGrMgzxeNsBAhkflixKvoRsDYuKI9Iu72lySs9yGykMf2L+C l8uO4OR5gzXH/CmauOROZGODrzvazKhn819VHX6WPDJopt7QsTCMibbCdKnvqW3t kBgofzWqYUvPL6OyRaYiBViPLdu9LuksIiBDHR+cdP2PSjGFlQL7Y9OHBjoXqI3D +HjMhBc7HEery+gUweqx3SZcVawVel+bGUVIVbVEYBE6wAOSLhL6jOwS/vAQTTkS /n2TrndJX9bH07pZdU88yDGKVLxwLCa2ssBz1Da6tNef9xztNT+cq5Sb9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB9r9a2bh5Cm2Ob5wxCti/OmlPyjMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvSDJ2MXJadUhrS2JZNXZuREVLMkw4NmFVX0tNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlnLMA0G CSqGSIb3DQEBCwUAA4IBAQAQLxuBD1R6mBhVj7e5wJh5enT58OI5UG3ekI+qVf7w DztgcUu7MxSotvEff9r77Hn/vSqB2tXn0p6sRVO5n+GhMznQ7+8EZWBp6XLwCAwN ku77x+08g90oFJA7ytwt8XOJD0XBb8Y3KdwIktdPNoFQZa7D4x2ebXV9btg2XazT hRTopDmSJSDQZAWqy59NM4vLI/cuKCQ9/AVruKvRJwMvV9+JSiUixJUwL25xLNHo 7BCMHlYv58d3DT6sTvQnYU2NYBJjPe/ctZQAJq9kO0MqG/mxSmmoJ9/dcUsk1B5o 5elAgBy2LZ7CoAUNhljfpkwelgKnzRDor3ZdAWHWn6fx -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:51 2026 by rpki-client